English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

Modern Industrial Control Systems (ICS) attacks evade existing tools by usingknowledge of ICS processes to blend their activities with benign SupervisoryControl and Data Acquisition (SCADA) operation, causing physical world damages.We present SCAPHY to detect ICS attacks in SCADA by leveraging the uniqueexecution phases of SCADA to identify the limited set of legitimate behaviorsto control the physical world in different phases, which differentiates fromattackers activities. For example, it is typical for SCADA to setup ICS deviceobjects during initialization, but anomalous during processcontrol. To extractunique behaviors of SCADA execution phases, SCAPHY first leverages open ICSconventions to generate a novel physical process dependency and impact graph(PDIG) to identify disruptive physical states. SCAPHY then uses PDIG to informa physical process-aware dynamic analysis, whereby code paths of SCADAprocess-control execution is induced to reveal API call behaviors unique tolegitimate process-control phases. Using this established behavior, SCAPHYselectively monitors attackers physical world-targeted activities that violateslegitimate processcontrol behaviors. We evaluated SCAPHY at a U.S. national labICS testbed environment. Using diverse ICS deployment scenarios and attacksacross 4 ICS industries, SCAPHY achieved 95% accuracy & 3.5% false positives(FP), compared to 47.5% accuracy and 25% FP of existing work. We analyzeSCAPHYs resilience to futuristic attacks where attacker knows our approach.

SCAPHY: Detecting Modern ICS Attacks by Correlating Behaviors in SCADA and PHYsical